Search Microsoft Audit logs for sign in attempts. Filter these logs using Microsoft queries.
Microsoft
How it works
Import this story to your tenant, from where you can adapt it to meet your unique needs.